how to use saslauthd AND sasldb
Andrew J Caird
andrew.caird at fccc.edu
Mon Jun 28 14:22:32 EDT 2004
On Mon, 28 Jun 2004, Jukka Salmi wrote:
> is it possible to configure Cyrus IMAPd (2.2.6, Cyrus SASL 2.1.18) to
> use both saslauthd and sasldb?
> The problem I want to solve: some users are stored in Kerberos, some are
> in a sasldb. I'd like Cyrus IMAPd to contact saslauthd (for plaintext
> authentication with the kerberos service), and, if this fails, to try to
> authenticate the user against the sasldb - or vice versa.
> Using saslauthd _or_ sasldb (via auxprop plugin) works fine; however, I
> don't know to make PLAIN logins work with both mechanisms - in case
> that's possible at all.
I think you can do this by listing multiple methods after the
"sasl_pwcheck_method" option in imapd.conf, for example:
sasl_pwcheck_method: saslauthd auxprop
I do this to authenticate users via LDAP, but authenticate the admin
user locally via sasldb.
If I'm doing this wrong, let me know! :)
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
More information about the Info-cyrus